--redact -- codex
Runtime leak protection and log redaction for Codex. Start an interactive Codex session with real secrets while redacting them from output and transcripts.
Usage
Runtime leak protection for Codex: Codex receives the real environment variables, but log redaction replaces any matching values it prints with [REDACTED] throughout the interactive session — so secrets stay out of the terminal and agent transcript.
$ echo "SECRET=super-secret-value" > .env
$ dotenvx run --redact --quiet -- codex